MyBB Community Forums › Community Archive › Archived Forums › Archived Development and Support › MyBB 1.6 › 1.6 General Support v
[Security] Avatar got hacked?

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Threaded Mode
Not Solved [Security] Avatar got hacked?
alzea Offline
Posts: 46
Threads: 14
Joined: May 2010
Reputation: 0
#1
Not Solved Question  2011-06-18, 03:49 PM
Today my forum got hacked. The hacker replaced all avatars with his own image. But not all the avatars changed, some still remain as usual... Huh

How could this happen? I only use two plugins, ezIRC and Sidebox with the most recent version. And I use MyBB version 1.6.3. And strong password, change admin directory, etc...

Note: I am using a VPS. Not shared host.

Thanks.
Find
mobesta Offline
Posts: 109
Threads: 35
Joined: Jun 2011
Reputation: 0
#2
Not Solved 2011-06-18, 03:54 PM (This post was last modified: 2011-06-18, 04:34 PM by mobesta.)
Sleepy
[Image: 4f23f9e28cbc.png]
Website Find
alzea Offline
Posts: 46
Threads: 14
Joined: May 2010
Reputation: 0
#3
Not Solved 2011-06-18, 03:55 PM
(2011-06-18, 03:54 PM)mobesta Wrote: whay mybb hack & hack & ...??? where is security in mybb 1.6.3 ????
Angry

Please dont flame, i need help...
Find
Matt Away

Former Staff
Posts: 37,498
Threads: 399
Joined: Apr 2008
Reputation: 776
#4
Not Solved 2011-06-18, 03:56 PM
(2011-06-18, 03:54 PM)mobesta Wrote: whay mybb hack & hack & ...??? where is security in mybb 1.6.3 ????
Angry

You know it's definitely an issue with MyBB do you??

Rolleyes

The best way of finding out what happened would just be to review your server logs.
MyReactions - All Plugins

Can you still feel the butterflies?

Free never tasted like pudding.
Website Find
alzea Offline
Posts: 46
Threads: 14
Joined: May 2010
Reputation: 0
#5
Not Solved 2011-06-18, 04:01 PM
(2011-06-18, 03:56 PM)MattRogowski Wrote:
(2011-06-18, 03:54 PM)mobesta Wrote: whay mybb hack & hack & ...??? where is security in mybb 1.6.3 ????
Angry

You know it's definitely an issue with MyBB do you??

Rolleyes

The best way of finding out what happened would just be to review your server logs.

Another way please?
Find
Matt Away

Former Staff
Posts: 37,498
Threads: 399
Joined: Apr 2008
Reputation: 776
#6
Not Solved 2011-06-18, 04:03 PM
I'm not really sure what other way you're expecting there to be. Someone did something on your server, logs are taken for a reason, you'll need to look at the logs and see what this person did. There isn't a big flashing message that will tell you what happened, it doesn't quite work like that.
MyReactions - All Plugins

Can you still feel the butterflies?

Free never tasted like pudding.
Website Find
mobesta Offline
Posts: 109
Threads: 35
Joined: Jun 2011
Reputation: 0
#7
Not Solved 2011-06-18, 04:10 PM (This post was last modified: 2011-06-18, 04:35 PM by mobesta.)
Sleepy
[Image: 4f23f9e28cbc.png]
Website Find
alzea Offline
Posts: 46
Threads: 14
Joined: May 2010
Reputation: 0
#8
Not Solved 2011-06-18, 04:10 PM
(2011-06-18, 04:03 PM)MattRogowski Wrote: I'm not really sure what other way you're expecting there to be. Someone did something on your server, logs are taken for a reason, you'll need to look at the logs and see what this person did. There isn't a big flashing message that will tell you what happened, it doesn't quite work like that.

I mean, how this happen... Where is the hole... Sad
log files are deleted.
Find
Matt Away

Former Staff
Posts: 37,498
Threads: 399
Joined: Apr 2008
Reputation: 776
#9
Not Solved 2011-06-18, 04:43 PM
(2011-06-18, 04:10 PM)alzea Wrote:
(2011-06-18, 04:03 PM)MattRogowski Wrote: I'm not really sure what other way you're expecting there to be. Someone did something on your server, logs are taken for a reason, you'll need to look at the logs and see what this person did. There isn't a big flashing message that will tell you what happened, it doesn't quite work like that.

I mean, how this happen... Where is the hole... Sad

Again, you would need to look at your logs. I don't know how you expect us to be able to tell you what happened without looking at any information. Bit like trying to get a mechanic to fix your car without him looking at it, he's not a magician.

(2011-06-18, 04:10 PM)alzea Wrote: log files are deleted.

What, all your server logs?? Apache access logs, all gone??
MyReactions - All Plugins

Can you still feel the butterflies?

Free never tasted like pudding.
Website Find
User 2877 Offline
Posts: 9,866
Threads: 594
Joined: Jan 2006
#10
Not Solved 2011-06-18, 04:45 PM
Entry could have been at many levels. From the server, to the services, to the site. It takes a seasoned system admin to figure it out.

Simply buying VPS with a control panel and installing a script doesn't give you any protection or insight on how security works.

I wish you luck.
Find


Forum Jump:


Users browsing this thread: 1 Guest(s)